Privacy Policy

We collect information you provide directly, information generated through your use of the service, and limited information received from third-party platforms you explicitly connect.

• Account information: name, email address, authentication identifiers, organization/workspace membership, and role information.
• Content and workflow data: opportunities, content plans, scripts, media assets, publication metadata, schedules, prompts, approval decisions, and operational settings.
• Connected-platform information: platform account or channel identifiers, display names, OAuth scopes, connection status, publication IDs, and performance metrics made available through authorized APIs.
• Billing information: subscription status, plan, usage, and transaction references. Payment card details are handled by our payment processor rather than stored directly by ViralFlow AI.
• Technical information: IP-derived network information, browser/device information, application logs, security events, error diagnostics, and service-health telemetry.

We use information to provide, secure, maintain, and improve ViralFlow AI, including to:

• authenticate users and protect workspaces;
• generate, render, schedule, and publish content at your direction;
• operate connected-platform integrations and retrieve authorized analytics;
• provide AI-assisted recommendations, ranking, optimization, and automation;
• process subscriptions, enforce plan limits, and provide billing support;
• detect abuse, investigate incidents, prevent fraud, and maintain reliability;
• communicate service, security, transactional, and support information.

ViralFlow AI accesses third-party platform data only after you initiate and authorize a connection. The permissions requested depend on the integration and may include identity, channel/page information, publishing capabilities, and analytics needed to provide the features you select.

OAuth access and refresh credentials are treated as secrets and are stored in encrypted form where our application persists them. We do not sell connected-platform credentials or use them to access unrelated account data.

You can revoke access from the applicable third-party account settings. Revocation may prevent ViralFlow AI from publishing, refreshing analytics, or otherwise operating that integration.

ViralFlow AI can send prompts, instructions, content, and related context to configured AI providers in order to generate scripts, summaries, recommendations, images, or other requested outputs. We aim to send only the information necessary for the requested workflow.

AI-generated output may be inaccurate, incomplete, or unsuitable for publication. You are responsible for reviewing content and ensuring that your use complies with applicable law, platform rules, and third-party rights.

We use specialized providers to operate the service. Depending on the features you use, these may include infrastructure and hosting providers, cloud object storage, database and queue infrastructure, payment processing, email delivery, observability/error monitoring, AI providers, and connected social/video platforms.

We may also disclose information when reasonably necessary to comply with law, protect users or the service, investigate security issues, or complete a corporate transaction subject to appropriate safeguards.

ViralFlow AI does not sell personal information as part of its ordinary business model.

We retain information for as long as reasonably necessary to provide the service, maintain legitimate business and security records, satisfy legal obligations, and resolve disputes. Retention periods may differ by data type and workspace configuration.

Security measures include encrypted transport, protected production secrets, encrypted persisted OAuth credentials, role-aware access controls, environment separation, operational logging, monitoring, backups, and infrastructure safeguards. No system can guarantee absolute security.

Depending on your location, you may have rights to request access, correction, deletion, portability, or restriction of certain personal information, or to object to particular processing. We may need to verify your identity before completing a request.

• You can disconnect third-party platform integrations from ViralFlow AI and/or the relevant platform.
• You can update account and workspace information through the application where available.
• You may request account or personal-data deletion through our contact channel.
• You may unsubscribe from optional marketing communications using the included unsubscribe mechanism.

ViralFlow AI is a business-oriented service and is not directed to children under 13. We do not knowingly collect personal information from children under 13 through the service.

ViralFlow AI and its providers may process information in the United States and other countries. Where required, we take appropriate steps intended to support lawful international data transfers.

We may update this policy as the product, providers, or legal requirements change. Material revisions will be reflected by updating the effective date and, where appropriate, by providing additional notice.

For privacy questions, data requests, or deletion requests, use our contact page and identify the request as a privacy matter.